CVE-2026-74567

The CVE concerns the Linux kernel keys subsystem: a bug in keyring_get_key_chunk() causes an out-of-bounds read when decoding description-level chunks. The read pointer is advanced by level * sizeof(long) past the inline prefix, while only the prefix is bounds-checked, allowing a long enough key ...

CVE-2026-74567 keys: fix out-of-bounds read in keyring_get_key_chunk()

In the Linux kernel, the following vulnerability has been resolved: keys: fix out-of-bounds read in keyringgetkeychunk For description-level chunks keyringgetkeychunk advances the read pointer by level sizeoflong past the inline prefix but only bounds-checks the prefix, so a long enough key...

CVE-2026-74566

In CVE-2026-74566, the Linux kernel keyring subsystem has a data-ordering defect: keyring_get_key_chunk() loads a description into the index chunk with the low-address first, while keyring_diff_objects() defines the first differing bit from the low end and folds the absolute byte index into the l...

Oracle Linux 10 : kernel (ELSA-2026-42919)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42919 advisory. - fanotify: fix false positive on permission events CKI Backport Bot RHEL-180076 CVE-2026-46150 - ice: fix double-free of txbuf skb Jakub Ramaseuski...

kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd

A flaw was found in the Linux kernel's trusted keys subsystem. A local user could exploit a memory leak in the tpm2loadcmd function, which fails to free a temporary memory allocation in certain error scenarios. This memory leak could lead to a system-wide Denial of Service DoS by exhausting...

CVE-2026-63824

A flaw was found in the Linux kernel's keyctlpkeyparamsget2 function within the KEYS subsystem. The vulnerability arises from an incorrect calculation of the internal output buffer's length, which can lead to a buffer overflow when a user-provided buffer is too small. This flaw could allow a loca...

CVE-2026-63824

In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctlpkeyparamsget2 The length for the internal output buffer is calculated incorrectly, which can result overflow when a too small buffer is provided. Fix the bug by allocating internal output with the siz...

CVE-2026-63823 keys: Pin request_key_auth payload in instantiate paths

In the Linux kernel, the following vulnerability has been resolved: keys: Pin requestkeyauth payload in instantiate paths A: requestkey B: KEYCTLINSTANTIATEIOV ================ ========================= create auth key store rka in auth key wait for helper get auth key load rka from auth key copy...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001271)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001271 advisory. The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash via...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001650)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001650 advisory. The KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the negative state to avoid a ra...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001162)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001162 advisory. The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service memory consumption via a series of KEYREQKEYDEFLTHREADKEYRING...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002604)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002604 advisory. The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of addkey for a key that already exists but is uninstantiated, which allows local users to cause...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003106 advisory. The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service memory consumption via a series of KEYREQKEYDEFLTHREADKEYRING...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002564 advisory. The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service memory consumption via a series of KEYREQKEYDEFLTHREADKEYRING...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002677)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002677 advisory. The KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the negative state to avoid a ra...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003032 advisory. The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of addkey for a key that already exists but is uninstantiated, which allows local users to cause...

EUVD-2017-16495

Malware in sbrugna...

EUVD-2015-8420

Malware in sbrugna...

EUVD-2017-7367

Malware in sbrugna...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization CVE-2024-58092 In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in keyput CVE-2025-21893 In the Linux kernel, the following...